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(57) Abstract: The invention relates to a method for a 
first communication device to performing authenticated 
distance measurement between said first communication 
device and a second communication device, wherein 
the first and the second communication device share 
a common secret and said common secret is used for 
performing the distance measurement between said 
first and said second communication device. The 
invention also relates to a method of determining whether 
data stored on a first communication device are to be 
accessed by a second communication device. Moreover, 
the invention relates to a communication device for 
performing authenticated distance measurement to a 
second communication device. The invention also relates 
to an apparatus for playing back multimedia content 
comprising a communication device. 
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The invention relates to a method for a first communication device to 
performing authenticated distance measurement between a first communication device and a 
second communication device. The invention also relates to a method of determining whether 
data stored on a first communication device is to be accessed by a second communication 
device. Moreover, the invention relates to a communication device for performing 
authenticated distance measurement to a second communication device. The invention also 
relates to an apparatus for playing back multimedia content comprising a communication 
device. 

Digital media have become popular carriers for various types of data 
information. Computer software and audio information, for instance, are widely available on 
optical compact disks (CDs) and recently also DVD has gained in distribution share. The CD 
and the DVD utilize a common standard for the digital recording of data, software, images, 
and audio. Additional media, such as recordable discs, solid-state memory, and the like, are 
making considerable gains in the software and data distribution market. 

The substantially superior quality of the digital format as compared to the 
analog format renders the former substantially more prone to unauthorized copying and 
pirating, further a digital format is both easier and faster to copy. Copying of a digital data 
stream, whether compressed, uncompressed, encrypted or non-encrypted, typically does not 
lead to any appreciable loss of quality in the data. Digital copying thus is essentially 
unlimited in terms of multi-generation copying. Analog data with its signal to noise ratio loss 
with every sequential copy, on the other hand, is naturally limited in terms of multi- 
generation and mass copying. 

The advent of the recent popularity in the digital format has also brought about 
a slew of copy protection and DRM systems and methods. These systems and methods use 
technologies such as encryption, watermarking and right descriptions (e.g. rules for accessing 
and copying data). 
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common secret is being used for performing the distance 
measurement, it can be ensured that when measuring the distance from the first 
communication device to the second communication device, it is the distance between the 
right devices that is being measured. 

The method combines a distance measurement protocol with an authentication 
protocol. This enables authenticated device compliancy testing and is efficient, because a 
secure channel is anyhow needed to enable secure communication between devices and a 
device can first be tested on compliancy before a distance measurement is executed. 

In a specific embodiment, the authenticated distance measurement is 
performed according to the following steps, 

- transmitting a first signal from the first communication device to the second 
communication device at a first time tl, said second communication device being adapted 
for receiving said first signal, generating a second signal by modifying the received first 
signal according to the common secret and transmitting the second signal to the first 
device, 

- receiving the second signal at a second time t2, 

- checking if the second signal has been modified according to the common secret, 

- determining the distance between the first and the second communication device 
according to a time difference between tl and t2. 

When measuring a distance by measuring the time difference between 
transmitting and receiving a signal and using a secret, shared between the first and the second 
communication device, for determining whether the returned signal really originated from the 
second communication device, the distance is measured in a secure authenticated way 
ensuring that the distance will not be measured to a third communication device (not 
knowing the secret). Using the shared secret for modifying the signal is a simple way to 
perform a secure authenticated distance measurement. 

La a specific embodiment the first signal is a spread spectrum signal. Thereby 
a high resolution is obtained and it is possible to cope with bad transmission conditions (e.g. 
wireless environments with a lot of reflections). 

In another embodiment the step of checking if the second signal has been 
modified according to the common secret is performed by the steps of, 

- generating a third signal by modifying the first signal according to the common secret, 

- comparing the third signal with the received second signal. 
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In a specific embodiment the data stored on the first device is sent to the 
second device if it is determined that the data stored on the first device are to be accessed by 
the second device. 

The invention also relates to a method of determining whether data stored on a 
first communication device are to be accessed by a second communication device, the 
method comprising the step of performing a distance measurement between a third 
communication device and the second communication device and checking whether said 
measured distance is within a predefined distance interval, wherein the distance measurement 
is an authenticated distance measurement according to the above. In this embodiment, the 
distance is not measured between the first communication device, on which the data are 
stored, and the second communication device. Instead, the distance is measured between a 
third communication device and the second communication device, where the third 
communication device could be personal to the owner of the content. 

The invention also relates to a communication device for performing 
authenticated distance measurement to a second communication device, where the 
communication device shares a common secret with the second communication device and 
where the communication device comprises means for measuring the distance to the second 
device using said common secret. 

In an embodiment the device comprises, 

- means for transmitting a first signal to a second communi cation device at a first time tl, 
said second communication device being adapted for receiving said first signal, 
generating a second signal by modifying the received first signal according to the 
common secret and transmitting the second signal, 

- means for receiving the second signal at a second time t2, 

- means for checking if the second signal has been modified according to the common 
secret, 

- means for determining the distance between the first and the second communication 
device according to a time difference between tl and t2. 

The invention also relates to an apparatus for playing back multimedia content 
comprising a communication device according to the above. 

In the following preferred embodiments of the invention will be described 
referring to the figures, wherein 
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tpliant device and might also comprise the step of checking 



0 



second device 203 is a 



whether the second device 203 really is the device identified to the first device 201. Then in 
207, the first device 201 exchanges a secret with the second device 203, which e.g. could be 



securely, e.g. according to some key management protocol as described in e.g. ISO 11770. 

Then in 209, a signal for distance measurement is transmitted to the second 
device 203 ; the second device modifies the received signal according to the secret and 
retransmits the modified signal back to the first device. The first device 201 measures the 
round trip time between the signal leaving and the signal returning and checks if the returned 
signal was modified according to the exchanged secret. The modification of the returned 
signal according to some secret will most likely be dependent on ttie transmission system and 
the signal used for distance measurement, i.e. it will be specific for each communication 
system (su.ch as 1394, Ethernet, Bluetooth, ieee 802.1 1, etc.). 

The signal used for the distance measurement may be a normal data bit signal, 
but also special signals other than for data communication maybe used. In an embodiment 
spread spectrum signals are used to be able to get high resolution and to be able to cope with 
bad transmission conditions (e.g. wireless environments with a lot of reflections). 

In a specific example a direct sequence spread spectrum signal is used for 
distance measurement; this signal could be modified by XORing the chips (e.g. spreading 
code consisting of 127 chips) of the direct sequence code by the bits of the secret (e.g. secret 
consists also of 127 bits). Also, other mathematical operations as XOR could be used. 

The authentication 205 and exchange of secret 207 could be performed using 
the protocols described in some known ISO standards ISO 9798 and ISO 1 1770. For example 
the first device 201 could authenticate the second device 203 according to the following 
communication scenario: 

First device -> Second device: Re||Text 1 

where Rb is a random number 

Second device -> First device: CertA||TokenAB 



performed by transmitting a random generated bit word to 203. The secret should be shared 



Where CertA is a certificate of A 
TokenAB=RAliRB||B||Text3||sS A (R A ||R B ||B||Text2) 
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signals are not identica^nen the received signal cannot be authenticated and can therefore 
not be used for measuring the distance as illustrated by 325. In 323 the distance is calculated 
between the first and the second device; this could e.g. be performed by measuring the time, 
when the signal is transmitted by the transmitter 309 from the first device to the second 
device and measuring when the receiver 317 receives the signal from the second device. The 
time difference between transmittal time and receive time can then be used for determining 
the physical distance between the first device and the second device. 

In figure 4 a communication device for performing authenticated distance 
measurement is illustrated. The device 401 comprises a receiver 403 and a transmitter 41 1. 
The device further comprises means for performing the steps described above, which could 
be by executing software using a microprocessor 413 connected to memory 417 via a 
communication bus. The communication device could then be placeid inside devices such as a 
DVD, a computer, a CD, a CD recorder, a television and other devices for accessing 
protected content. 
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cording to any of the claims 2, wherein the first signal and the 
common secret are bit words and where the second signal comprises information being 
generated by performing an XOR between the bit words. 

6. A method according to any of the claims 1, wherein the common secret has 

been shared before performing the distance measurement, the sharing being performed by the 
steps of, 

- performing an authentication check from the first communication device on the second 
communication device, by checking whether said second communication device is 
compliant with a set of predefined compliance rules, 

- if the second communication device is compliant, sharing said common secret by 
transmitting said secret to the second communication device. 

7 .A method according to claim 6, wherein the authentication check further 

comprises checking if the identification of the second device is compliant with an expected 
identification. 

g A method of determining whether data stored on a first communication device 

are to be accessed by a second communication device, the method comprising the step of 
performing a distance measurement between the first and the second communication device 
and checking whether said measured distance is within a predefined distance interval, 
wherein the distance measurement is an authenticated distance measurement according to 
claim 1. 

9 A method according to claim 8, wherein the data stored on the first device are 

sent to the second device if it is determined that the data stored on the first device are to be 
accessed by the second device. 

10. A method of determining whether data stored on a first communication device 

is to be accessed by a second communication device, the method comprising the step of 
performing a distance measurement between a third communication device and the second 
communication device and checking whether said measured distance is within a predefined 
distance interval, wherein the distance measurement is an authenticated distance 
measurement according to claim 1. 
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FIG. 4 
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